Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D517E20CF6211EF95A77763762E951A.roa
File: 8D517E20CF6211EF95A77763762E951A.roa (raw, json)
Hash identifier: eov+5U2XUgLcqjUmx5A93xyDZh6Sr8Gr6zAWGgyRuQc=
Subject key identifier: 16:8C:5B:C0:00:C3:25:16:B1:E0:57:36:82:79:24:39:14:E1:EC:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01056D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D517E20CF6211EF95A77763762E951A.roa
Signing time: Fri 10 Jan 2025 14:52:46 +0000
ROA not before: Fri 10 Jan 2025 14:52:42 +0000
ROA not after: Tue 21 Jan 2025 14:52:42 +0000
asID: 399077
IP address blocks: 156.248.76.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66925 (0x1056d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 14:52:42 2025 GMT
Not After : Jan 21 14:52:42 2025 GMT
Subject: CN=6781343e-9934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:eb:28:ca:83:0d:f5:fc:1d:c7:f1:b0:47:
47:fb:5c:50:d2:29:d7:97:0d:3b:34:53:26:63:00:
18:c0:31:72:c3:a3:03:7d:8a:3c:b0:ff:2b:91:40:
67:9e:f5:0f:01:c4:39:d4:a0:74:33:5b:5f:ec:51:
13:d5:93:ee:e2:46:57:6b:07:ac:7e:e0:19:89:72:
70:d1:d0:de:1d:ad:5c:0e:63:2c:99:34:20:0e:c8:
59:99:9c:c8:99:69:8d:2c:4a:06:5f:c0:ec:c5:5c:
5e:97:81:60:73:53:6d:e0:95:7e:ff:e3:47:0f:75:
93:73:00:0d:b3:66:e2:67:6c:b9:41:59:92:1c:da:
4d:30:53:55:7c:94:fe:b6:ff:99:51:28:77:4c:6a:
eb:f9:18:0a:58:a7:d7:5b:94:89:bf:ae:a0:73:44:
50:63:91:3d:23:01:e8:37:15:05:a1:c2:2d:bd:0a:
81:a2:b7:e0:bb:45:f6:17:c9:f2:c5:dc:57:d0:30:
95:74:3b:20:19:3b:96:e4:13:e8:bc:73:55:e3:91:
98:d0:9f:c1:b2:ff:b0:d2:41:b1:3d:7a:b9:a1:b8:
90:bb:21:52:ec:10:e2:9b:56:36:11:51:9e:17:e3:
11:23:a4:30:7f:c3:b5:c3:df:d7:5a:13:18:40:83:
4d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8C:5B:C0:00:C3:25:16:B1:E0:57:36:82:79:24:39:14:E1:EC:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D517E20CF6211EF95A77763762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.76.0/23
Signature Algorithm: sha256WithRSAEncryption
59:ce:d7:48:b0:52:a2:de:19:cd:cc:e8:63:bf:c8:ea:ff:95:
61:22:02:7c:7e:d7:c3:1e:76:64:3e:5c:e3:0f:40:a2:e3:bc:
f0:b3:ba:1f:da:20:f3:64:8d:29:56:a7:27:0d:29:ce:6e:4f:
6d:cb:0f:26:9f:f3:67:39:9b:c4:b3:90:39:70:b8:91:4d:fa:
de:4c:ec:fd:9c:19:f2:ff:e7:ae:7f:7f:5b:d3:91:eb:e0:64:
8e:ff:31:5e:98:ad:59:3c:99:74:d2:db:4b:73:e9:a9:00:84:
28:93:5a:b0:7a:b2:c2:65:66:f0:6d:47:48:98:0c:0e:f9:db:
88:60:42:3c:d1:6a:f1:29:db:56:91:b3:7e:5a:f3:59:89:b8:
07:22:7d:64:06:46:04:94:c0:3f:13:71:68:73:9b:86:d4:91:
5b:69:25:27:18:51:34:df:e7:d3:33:d8:27:6e:3c:34:d2:8c:
7c:ec:e0:e5:eb:ff:24:4a:69:ec:61:30:2b:6e:5e:9a:36:8c:
a2:ba:7d:2a:5b:08:4c:7b:1b:f2:8f:95:c9:66:ce:db:b8:c3:
e0:ea:67:21:9c:0c:e7:18:b1:60:45:ea:cc:c8:14:9b:69:d9:
7b:6b:72:9e:38:dd:46:dd:65:50:b8:c7:30:a6:c6:5b:9c:8d:
83:df:5d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:30 2025 by rpki-client